...
A question mark('?') after a field name specifies that a missing value in received HL7 ADT messages will match with any value for that field in existing Patient Records, as Patient Records with missing values for that field will match with any value for that field in received HL7 ADT messages. Field names without question marks specifies, that HL7 ADT messages without values for such fields will not match any existing Patient Record, as Patient Records without values for such fields will not get selected on receive of any HL7 ADT message.
With 'pid*?*', you have to configure the Patient's family name complex ('familyname') as additional matching criterium.
Surrounding <demograhic-match> by brackets('[]') defines, that demographic fields shall not be considered for the selection of an existing Patient record, if the Patient ID is qualified by an Issuer/Authority in the received HL7 ADT message and in the matching Patient Record.
...